89c15459bad6b78fdf5e128b71f0bce1858f14d5717b5d1c3e5733e0d1989b17[.]exe[.]zip

General

Target

89c15459bad6b78fdf5e128b71f0bce1858f14d5717b5d1c3e5733e0d1989b17.exe.zip
Size

12.3MB
MD5

51254af2a4189636f946ccdf25cbe0b4
SHA1

66322cdea2533bce2bc401e649f9414faba2001f
SHA256

81a6f1b711739b51cc8d9e2bf80aa4a816838111701a2ed98ef6d1912a218978
SHA512

855e2458092a54acf84e4bb2ea55f74ad7c3ea58a33fa763486ffb466c0a49d938a1c9fd568c6d8a74206aef982eebc39f6666fb50701e89ab59c431318e8b41
SSDEEP

196608:1yoiP0M9p2Rm10QuvOrNN6b19uOvH3DljUBpxtauJlzH:1uP0M94SPrN67lBYhtFPH

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/89c15459bad6b78fdf5e128b71f0bce1858f14d5717b5d1c3e5733e0d1989b17.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/89c15459bad6b78fdf5e128b71f0bce1858f14d5717b5d1c3e5733e0d1989b17.exe

89c15459bad6b78fdf5e128b71f0bce1858f14d5717b5d1c3e5733e0d1989b17.exe.zip
.zip

Password: infected
89c15459bad6b78fdf5e128b71f0bce1858f14d5717b5d1c3e5733e0d1989b17.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 42.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 473KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE